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We continue to strive to achieve this stretch casework target and 
have seen a small incremental improvement across Q3 as 
forecasted. We are typically closing cases at 14 weeks, but will 

9 > m 5 z S need to improve our timeliness by a further 4-6 weeks to be in a 
Efficient and timely delivery of our services for We will assess and respond to 80% of Data Protection concerns Goal 1 Charter Performance 26.5% 33.4% 39.3% Red position to consistently assess and respond to 80% of data 
individuals and organisations within 90 days Measure Measure p Uris i pi 

protection concerns within 90 days. We continue to monitor the 

age profile of our cases closely, and track our progress, as we 
understand the impact on our customers for having to wait for their 
cases to be allocated. 


Since Q2 we have been able to assess and respond to 90% of data 
protection concerns within 6 months. We are now in a position 


We will assess and respond to 90% of Data Protection concerns Charter Performance where this Key Performance Indicator (KPI) is consistently being 
a Goal 1 89.4% 93.6% 94.0% h f 
within 6 months Measure Measure exceeded and as such we are now focused on improving our 
timeliness further, as we aspire to deal with 80% of cases within 90 
days. 


We continue to monitor our oldest cases and routinely review 
whether we are in a position to assess and respond to these cases. 


A A i > 
Eadem 27 Gi e CE baea o ee eeaeee Goal 1 PELSTAMENISS 1.24% 1.47% 1.28% We keep our customers updated on progress. These cases are 
over 12 months old Measure 5 caver Sees fi z 
usually linked to an ongoing investigation or a developing policy 
position. 
‘i 4 is ee Across Q3 we contined to focus on improving our timeliness for 
9 
ye ait resolve 80% 0f Wren e within 7 calendar days Goal 2 Charter Performance 47.6% 76.7% 79.8% written enquiries and just missed achieving this service standard. 
(Combined measure of Public and Business Advice enquiries) Measure Measure a 
We are on track to achieve our target for Q4. 
r K aa ne Further improvement during Q3, where 2,029 of 2,123 cases were 
0 r r r 
We wil neato ceka Gi writen Sen iida aly Gallente daye Goal 2 Greer Par nmema 70.9% 94.4% 95.6% resolved within 30 calendar days. Of the remaining 94 cases, only 
(Combined measure of Public and Business Advice enquiries) Measure Measure 
40 cases took over 90 days to close (1.89%). 
Across Q3 we saw consistent strong performance on live chats 
ithi i 9 9 
We will answer 80% of calls and live chats within 60 seconds Charter Performance answered. within 60: seconds duning Q3 (87%. compared to 85% at 


: % Goal 1 New for Q2 61% 78% Q2), with a significant improvement in helpline calls answered 
(Combined measure of calls and live chats) Measure Measure within 60 seconds (76% compared to 58% at Q2). In total 85,091 


calls were answered; 74,543 helpline calls and 10,548 live chats. 


Where possible, we aim to resolve all service complaints to the 
customer’s satisfaction. This includes putting things right when 
things have gone wrong, apologising for mistakes we have made 
and learning from service complaints, so that similar problems do 
not recur. Where a customer remains dissatisfied with the outcome 
of a service complaint, the customer (via their MP) can ask the 

s e PHSO to look into their complaint. When this happens, in all cases, 
En e aan a EE eee Ico Goal 4 To 100% 88.9% 100% we welcome any addition learnings and recommendations that 

PHSO identifies, but overall if we have dealt with the complaint 

comprehensively, our aim is that PHSO does not identify and 
uphold any unaddressed ICO failings. 
Across the first three quarters we have received 34 PHSO 
complaints (12 in Q1; 9 in Q2; 13 in Q3), of which 1 was upheld in 
Q2. Therefore the cumulative in-year percentage at the end of Q3 
is 97% 


In Q3, we were able to significantly improve on timeliness for 
We will investigate and respond to 90% of service complaints Seice complaints:.78-out of 97 aes complaints were 
pori Charter Performance investigated and responded to within 30 calendar days; an 
within 30 calendar days Goal 1 64.1% 58.6% 80.4% i $ pi < 7 
5 A R Measure Measure improvement since Q2. We expect this contined focus to result in 
(Combined measure of service complaints across all teams) H + rae z 
over 90% of service complaints being investiogated and responded 
to within 30 days for Q4. 


The overall ICO Customer Satisfaction Index (CSI) is 69.4, with 
PEON Aantal Aaa satisfaction at 60.4 for our Public Services and 80.7 for Business 
Customer satisfaction score Goal 4 EET een eesti 69.4 Not Applicable|Services. Aim is to increase Public Advice satisfaction by +3.6 by 

Q4 2022/23 contributing to overall CSI ambition for 2022/23 of 
72.4 


Management Board Scorecard 


Charter 


r Service 
Measure Supporting Measures IRSP Goal Standard performance performance performance performance RAG Status Q3 Comments 


Measures 


, i ahi aa ere yi s 6 
We will refer or close 80% of personal data breach reports within Goal 5 Charter Performance 54% 29% 65% Red Positive direction of travel in line with recovery plan (from 29% at 
30 days Measure Measure Q2 to 65% at Q3). 

R i 
Ern than 1% personal data breach reports will be over 12 months Goal 5 P PEIRA <1% <1% 0% A data breach reports over 12 months old at 31 December 


We have made good progress as pandemic restrictions have eased 
on progressing cases where physical restrictions were limiting our 
ability to review information (as a result of its nature or 

x R classification). As a result of our wider queue, however, we are now 
Uses thiar 1% Gour kreedomof Information case loadiwill beover Goal 1 Performance 4.22% 3.28% 5.16% Red at the point where a larger number of cases are hitting the KPI 
12 months old Measure : 

threshold due to the age profile of cases in the queue. We are 

however allocating all cases from summer 2021 now and as new 
capacity comes on stream the queue level and thereafter the age 
profile will be addressed over the next 12 months. 


Our output is now consistently keeping pace with the number of 
cases we are receiving and our efficiency has returned to pre- 
pandemic levels. We continue, however, to struggle to make 
significant headway into our queue, which is affecting our 
We will reach a decision and respond to 80% of Freedom of Charter Performance amenes andaga Te lated KEN performan ce arheaddtiona 

i Re Goal 1 73.79% 72.67% 73.33% casework resource, as well as change towards more upstream 
Information concerns within 6 months Measure Measure ae z re Š 

activity to support public authorities and share learning as well as 

more targeted enforcement for the next financial year will help us 
tackle this via a recovery plan. The recovery plan detail will come 
to a future informal Management Board discussion session once 
approved by the Regulatory Delivery Board. 


Total First-Tier Tribunal cases closed in Q3 were 40, of which 28 

were successfully defended*. Cumulative performance for the first 

66% of Freedom of Information tribunal hearings in our favour Goal 4 Performance 84% 70% 70% three quarters of 2021/22 stands at 73% (101 successfully 
Measure defended out of 138 cases closed). 

(* 'Successfully defended' is outcomes other than ‘Allowed’, 'Part- 

Allowed' and 'Consent Order'.) 


s z F : P Year to date: 1,209 recommendations issued (up from 1,042 in 
9 , A 
90% of our audit recommendations will be accepted in full or in Goal 2 Performance 99% 99% 98% 2020/21) with an average of 98.6% accepted, consistently 


part Measure performing ahead of target in 2021/22. 


This is an annual measure. Two exit reports have been published in 
Not Applicable|Q3. There are currently nine participants in the Sandbox with two 
exit reports anticiapted for publication in Q4. 


Performance N/A N/A N/A 


Positive feedback from Sandbox participants Goal 4 Messie (annual) (Annual) (Annual) 


An Information Access recovery plan is in place. The drop in Q3 
performance was expected as we complete a number of overdue, 
complex late cases which has an inverse effect of the cases 

x ` S completed on time rate. Recruitment of permanent staff has taken 
awg eo (39 SE Gh HALSTED ASSESS ING SES CEA Goal 4 Grepa Peo mance 83% 79.7% 59.9% Red place, and additional staff are now in post and training. An 
statutory deadlines Measure Measure any 5 = 

additional 10 secondees from across the business are now also in 

post for 12 weeks. We have set a target of reaching compliance 
(92%) by the end of Q1 2022/23. Our Recovery Plan is available to 
view online. 


The Hub engages with businesses and public sector organisations 
(including regulators) innovating with personal data to help them 
Performan. build data protection by design and default into their products. 
Number of organisations working with the Innovation Hub Goal 4 43 19 43 Not Applicable | Activities and outputs are tailored to each individual project and 


Measure i i P ee i pad 
can include guidance, mentoring advice in person or in writing, and 
participation in techsprints, which may result in changes to 
proposals or products, where appropriate. 
6 > 3 
70% of external DPIA requests for advice to be responded to in 8 Goal 6 Charter Performance 100% 100% 100% 8 cases in total in Q1; 1 case in Q2; 3 cases in Q3 


weeks Measure Measure 
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2 cases in total in Q1, 1 extended due to complexity. 2 cases in 
Q2; 0 cases in Q3. 

No requests for Prior Consultation relating to law enforcement 
processing during the first three quarters of 2021/22. 


We will respond to 100% of prior consultation submissions within Goal 6 Charter Performance 100% 100% N/A 


statutory timeframes Measure Measure (0 cases) Not Applicable 


100% of regulatory outcome fines have a recovery action plan Performance MhisiKPI has been met foreach quarter witha casesin Qi, 11 
tek gunatory, i y P Goal 5 100% 100% 100% cases in Q2 and 8 cases in Q3. Of the 5 cases received in Q4 to 
within 2 working days of the debt becoming due Measure A 
date, the KPI has been met in each case. 


89 out of 124 investigations were completed within 12 months of 
starting, comprising 44 Civil, 17 Cyber, 4 Criminal Investigations 
and 24 Privacy and Digital Marketing Investigations. Current KPI 
performance across the teams is between 67% and 85%, with the 
Criminal Investigation Team's performance of 40% having a 
significant impact on overall compliance; this is due to a number of 
Performance factors including court backlogs and the ongoing impact of the 
95% of investigations close within 12 months of starting. Goal 5 Méasure 90.9% 72.4% 71.8% Red pandemic on witness interviews and warrant executions. More 

broadly capacity issues in Regulatory Legal and external counsel 
are also having a negative effect with difficult decisions to be made 
around prioritisation of files. Recruitments underway, secondment 
programme, as well as fine retention proposals will all allow greater 
progress to be made over the coming 6-9 months. We have 
nevertheless completed more enforcements this year than in any 
other year. 


We will deliver ICO role in UK adequacy process to agreed Performance ae $ 
timetables to enable support delivery of adequacy findings eal Measure Onitaroct onare ontargei All timelines currently being met. 


Our Outcome Measures are under development, following 
implementation of a research project. Questions underpinning this 
Outcome and effectiveness of our work with 5 PAR e Outcome measure will encompass a range of supporting questions, to cover 
Bea mane Do we deliver for individuals? Goal 1 i a 
individuals and organisations. Measure areas such as the extent to which the ICO is perceived to be 
helpful, whether our advice can be trusted, and whether individuals 


would recommend the ICO to others. 


Our Outcome Measures are under development, following 
implementation of a research project. Questions underpinning this 
EnS measure will encompass a range of supporting questions, to cover 
Do we deliver for organisations? Goal 4 Hea areas such as whether organisations would recommend the ICO, 

whether our involvement improves organisational compliance, 
whether our guidance is helpful, practical and proportionate, and 
whether our recommendations are implemented. 


Our Sentiment Measures are under development, following 
implementation of a research project. Questions underpinning this 
Sentiment measure will encompass a range of supporting questions, to cover 
Impact and influence of the work of the ICO. Does the ICO uphold data rights for individuals? Goal 1 Measure areas such as whether individuals know where to get information 

on how to keep their information safe, perceptions around risks to 
their data, and what organisations should be doing to keep their 
data safe. 


Our Sentiment Measures are under development, following 
implementation of a research project. Questions underpinning this 
Does the ICO encourage trustworthy and responsible data use by Sentiment measure will encompass a range of supporting questions, to cover 
aS Goal 1 7 7 a 
organisations? Measure areas such as whether the ICO gives confidence in the way data is 
used by organisations, whether organisations know how to -and 


are trusted to - keep information safe. 


Our Sentiment Measures are under development, following 
implementation of a research project. Questions underpinning this 
measure will encompass a range of supporting questions, to cover 
Does the ICO support and promote economic growth, competition Goal 1 Sentiment areas such as confidence in using digital services, whether the 
and innovation? Measure work of the ICO supports in building customer confidence and how 
data is looked after, as well as the ICO's support, innovation, 
international influence, and how effectively we work with others to 
reduce burdens on business. 


